Iptables: Difference between revisions
m --libdir=/usr/lib64 added |
No edit summary |
||
| Line 13: | Line 13: | ||
== Dependencies == | == Dependencies == | ||
{{Note|If tcpmss is being used with iptables look at this message for more info [http://marc.info/?l=netfilter-devel&m=123798544815753&w=1].}} | |||
== Non-Multilib == | == Non-Multilib == | ||
Revision as of 07:47, 3 April 2009
| Download Source: | http://iptables.org/projects/iptables/files/iptables-1.4.20.tar.bz2 |
|---|---|
| Download Source: | ftp://ftp.netfilter.org/pub/iptables/iptables-1.4.20.tar.bz2 |
Introduction to Iptables
iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators.
Project Homepage: http://iptables.org/projects/iptables/
Dependencies
Non-Multilib
Compile the package:
./configure --prefix=/usr --libexecdir=/lib/iptables \
--bindir=/sbin --sbindir=/sbin &&
make
Install the package
make install
Multilib
This package does not provide any libraries so only one installation is needed.
32Bit
Not Supported under a 64bit Kernel.
N32
Not Supported under a 64bit Kernel.
64Bit
Compile the package:
CC="gcc ${BUILD64}" ./configure --prefix=/usr \
--libexecdir=/lib64/iptables --bindir=/sbin \
--sbindir=/sbin --libdir=/usr/lib64 &&
make
Install the package
make install
Contents
Installed Programs: iptables, iptables-restore, iptables-save, ip6tables
Installed Libraries: libip6t_*.so, libipt_*.so
Installed Directory: /lib/iptables
Short Descriptions
iptables: is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.
iptables-restore: is used to restore IP Tables from data specified on STDIN. Use I/O redirection provided by your shell to read from a file.
iptables-save: is used to dump the contents of an IP Table in easily parseable format to STDOUT. Use I/O-redirection provided by your shell to write to a file.
ip6tables: is used to set up, maintain, and inspect the tables of IPv6 packet filter rules in the Linux kernel. Several different tables may be defined. Each table contains a number of built-in chains and may also contain user-defined chains.
libip*.so: library modules are various modules (implemented as dynamic libraries) which extend the core functionality of iptables.
Boot Script
To set up the iptables firewall at boot, install the /etc/rc.d/init.d/iptables init script included in the bootscripts package.
make install-iptables
Misc
Some scripts helpful can be found at http://www.linuxfromscratch.org/blfs/view/svn/postlfs/firewall.html